Court case 3 U 2906/20 – Court Ruling (Germany, 2021)

Court Ruling
DPA LGMnchen4 October 2021Germany
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A German court ruled that a person has the right to receive copies of all their personal data from a company, not just a summary. This decision clarifies that companies must provide full copies of personal data when requested under GDPR.

What happened

A person requested full copies of their personal data from a company, which initially refused to provide them.

Who was affected

An individual who wanted complete copies of their personal data held by a company.

What the authority found

The court found that individuals are entitled to receive copies of their personal data under GDPR, not just summaries.

Why this matters

This ruling reinforces the right of individuals to access full copies of their personal data, ensuring transparency and accountability from companies. It serves as a reminder for businesses to comply with data access requests fully.

GDPR Articles Cited

Art. 4(1) GDPR
Art. 15(1) GDPR
Art. 15(3) GDPR
Decision AuthorityOLG München
Reviewed AuthorityLG München (Germany)
Full Legal Summary
Detailed

In accordance with Article 15(3) GDPR the claimant, as the data subject, demanded in a pre-action measure that the defendants provide them with copies of all of the claimant’s personal data held by the defendants. In particular, the claimant requested copies of telephone notes, memos, protocols, e-mails, letters and underwriting documents for capital investments. The defendants subsequently provided information on the claimant’s personal data in accordance with Article 15(1) GDPR. However, they did not provide the claimant with copies of the documents. The refusal to provide the copies was based on the defendants' argument that Article 15(3) GDPR only governs the method in which information is provided, but does not confer an entitlement on the data subject to be provided with copies. In the subsequent trial, the claimant widened their claim and demanded that the defendants be ordered to provide them with copies of all personal data, including the requested notes, memos and documents. At trial, the court found that the data in question was in fact personal data and ordered the defendants to provide the claimant with copies of all her personal data. The defendants appealed to the OLG Munich to revoke the decision of the trial court. The OLG Munich had to decide on the question if a claim under Article 15 GDPR entitles the data subject to be provided with copies of their personal data and whether Article 15(3) GDPR contains an independent entitlement to have a copy of the personal data handed over to the data subject. The appellate court dismissed the defendants' application and upheld the trial court's decision to order the defendants to provide the claimant with copies of all her personal data.  The Court found that an individual who is entitled to information under Article 15(1) GDPR is also, independently, entitled to receive copies pursuant to Article 15(3) GDPR. Both paragraphs concern the same subject matter – personal data – but are different entitlements

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 3 U 2906/20 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

4 October 2021

Authority

DPA LGMnchen

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 3 U 2906/20 - Germany (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: